Professionally Evil

pewapt101

Professionally Evil Web Application Penetration Testing 101

harpoon

A collection of scripts, and tips and tricks for hacking k8s clusters and containers.

C4

Cyberdelia, a Collection of Command and Control frameworks

client-side-attacks-lab

Lab Environment for learning client-side attacks such as CSRF, Clickjacking, XSS, and CORS abuse.

x86_asm

x86 Assembly Code Examples for Blog Posts

LD_PRELOAD-rand-Hijack-Example

Code samples to go along with the blog post on using LD_PRELOAD to hijack rand() in a number guessing game.

bash_tricks

a github repo that will be used for teaching bash optimizations in a youtube series

DVFPS

A Damn Vulnerable FPS game built using Godot

nmap_oui_update

A script to download OUI data from the IEEE and parse it into the nmap-mac-prefixes file so Nmap has the latest OUI data.

LD_PRELOAD-run-at-load-time

Code samples to go along with the blog post on how to run code at load/unload time when using LD_PRELOAD to inject libraries.

DVMMO

Damn Vulnerable MMO; an mmo game that is deliberately vulnerable and maybe just maybe fun to play.

SameSiteAttackDemo

A simple demo web app built with Svelte + Restify that is meant to demonstrate security aspects regarding the SameSite cookie flag.

k8s-labs

csik

Client Script Injection Kit

CVE-2021-38295-PoC

A simple Python proof of concept for CVE-2021-38295.

LD_PRELOAD-accept-backdoor

Code samples to go along with the blog post on how to create an LD_PRELOAD backdoor hooking accept()

cookie-monster

Coming soon...

d0hnut

DNS over HTTPS Security Lab

edit_leaked_file_descriptor

An all-in-one tool to edit a leaked file descriptor in SetUID binaries.

container-escape-labs

Some container escape labs

static-analysis-ttp

blog-ansible-webservers

Repo for this blog: https://www.secureideas.com/blog/ensuring-web-security-via-ansible-apache

blog-juiceshop-workshop

Repo for this blog post: https://www.secureideas.com/blog/juiceshop-workshop-in-less-than-5-minutes

March-2021-KeyGenMe-Solution

This repo is to provide an example solution to the KeyGenMe challenge binary from March 2021.

owasp-modsecurity-crs

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)

packer-kali_linux

This is a repository that will be used to help create a process of a new kali vagrant box for hashicorp each month.

tartar-sauce

Miscellaneous demos and scripts for user awareness campaigns

Top10

Official OWASP Top 10 Document Repository

webcast-cloudy-stealth

Infrastructure as Code repo that accompanies the Cloudy with a Chance of Stealth webcast

writeup_11_13_2020_challenge

A supporting repo for a blog post write-up of how to solve the November 13th, 2020 Detective Nevils Mystery Challenge.